Dan CarpenterandGreg Kroah-Hartman 18fdce809a zram: off by one in read_block_state() ...

[ Upstream commit a88e03cf3d ]

snprintf() returns the number of bytes it would have printed if there
were space.  But it does not count the NUL terminator.  So that means
that if "count == copied" then this has already overflowed by one
character.

This bug likely isn't super harmful in real life.

Link: https://lkml.kernel.org/r/20210916130404.GA25094@kili
Fixes: c0265342bf ("zram: introduce zram memory tracking")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Cc: Minchan Kim <minchan@kernel.org>
Cc: Sergey Senozhatsky <senozhatsky@chromium.org>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2021-11-18 19:17:10 +01:00

..

aoe

Merge tag 'for-5.14/drivers-2021-06-29' of git://git.kernel.dk/linux-block

2021-06-30 12:21:16 -07:00

drbd

block: move the bdi from the request_queue to the gendisk

2021-08-09 11:53:23 -06:00

mtip32xx

mtip32xx: use blk_mq_alloc_disk and blk_cleanup_disk

2021-06-30 15:34:04 -06:00

null_blk

null_blk: add error handling support for add_disk()

2021-08-23 12:55:46 -06:00

paride

Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

2021-09-02 15:09:46 -07:00

rnbd

block/rnbd-clt-sysfs: fix a couple uninitialized variable bugs

2021-10-12 10:39:57 -06:00

rsxx

Merge tag 'for-5.14/drivers-2021-06-29' of git://git.kernel.dk/linux-block

2021-06-30 12:21:16 -07:00

xen-blkback

isystem: trim/fixup stdarg.h and other headers

2021-08-19 09:02:55 +09:00

zram

zram: off by one in read_block_state()

2021-11-18 19:17:10 +01:00

amiflop.c

amiflop: use blk_mq_alloc_disk and blk_cleanup_disk

2021-06-11 11:54:43 -06:00

ataflop.c

ataflop: remove ataflop_probe_lock mutex

2021-11-18 19:17:07 +01:00

brd.c

brd: reduce the brd_devices_mutex scope

2021-10-17 06:51:19 -06:00

cryptoloop.c

cryptoloop: add a deprecation warning

2021-08-27 10:44:54 -06:00

floppy.c

floppy: fix calling platform_device_unregister() on invalid drives

2021-11-18 19:16:16 +01:00

Kconfig

Merge tag 'scsi-misc' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

2021-09-02 15:09:46 -07:00

loop.c

loop: reduce the loop_ctl_mutex scope

2021-09-03 22:14:40 -06:00

loop.h

loop: reduce the loop_ctl_mutex scope

2021-09-03 22:14:40 -06:00

Makefile

drivers/block: remove the umem driver

2021-03-24 06:57:40 -06:00

n64cart.c

n64cart: fix return value check in n64cart_probe()

2021-09-09 14:24:02 -06:00

nbd.c

nbd: fix possible overflow for 'first_minor' in nbd_dev_add()

2021-11-18 19:17:05 +01:00

pktcdvd.c

block: move the bdi from the request_queue to the gendisk

2021-08-09 11:53:23 -06:00

ps3disk.c

ps3disk: use memcpy_{from,to}_bvec

2021-08-02 13:37:27 -06:00

ps3vram.c

ps3vram: use bvec_virt

2021-08-16 10:50:33 -06:00

rbd_types.h

…

rbd.c

rbd: use bvec_virt

2021-08-16 10:50:33 -06:00

sunvdc.c

Merge tag 'char-misc-5.14-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

2021-07-05 13:42:16 -07:00

swim3.c

swim3: use blk_mq_alloc_disk

2021-06-11 11:53:02 -06:00

swim_asm.S

…

swim.c

swim: use blk_mq_alloc_disk

2021-06-11 11:53:03 -06:00

sx8.c

sx8: use the internal state machine to check if del_gendisk needs to be called

2021-08-12 10:29:36 -06:00

virtio_blk.c

Revert "virtio-blk: Add validation for block size in config space"

2021-10-13 08:35:36 -04:00

xen-blkfront.c

Merge tag 'for-linus-5.15-rc1-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/xen/tip

2021-09-02 13:20:11 -07:00

z2ram.c

Merge tag 'for-5.14/drivers-2021-06-29' of git://git.kernel.dk/linux-block

2021-06-30 12:21:16 -07:00